Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: D8j0b6lP+gyCLzTGzTMRbj36AjiZbvdrGDRCed486AM=
Subject key identifier: 45:AB:69:77:A3:50:BF:0C:E1:B4:CB:3A:1E:8D:55:71:0D:D1:69:42
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 019D37891D9193A5B7688E01984755D662A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 0D47
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: TJfTLvRA4HbsAXvouYwKWlW3iiECUazTaF2QkcL5cMk=)
2: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (hash: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1d:91:93:a5:b7:68:8e:01:98:47:55:d6:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=45ab6977a350bf0ce1b4cb3a1e8d55710dd16942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:4e:e2:dd:ed:ba:66:40:ad:2c:03:7d:1d:
14:42:32:91:cf:2d:06:c3:11:c3:47:c0:46:a8:8c:
18:55:b8:56:ac:b8:c8:f0:d9:e3:35:83:7f:6d:85:
68:77:80:61:e8:c2:7e:b4:74:4d:c8:52:44:5d:46:
db:9a:6f:35:89:03:a2:dc:5a:fc:1c:33:db:37:e9:
23:18:1d:2d:2c:15:0d:3f:ef:49:2a:1c:e6:9e:13:
31:05:f9:c4:4a:22:59:78:10:01:a2:ac:d6:c0:e3:
02:ff:15:76:24:9e:6f:04:b0:aa:44:e2:70:5a:87:
7b:32:eb:76:a1:a9:f9:50:92:07:d0:34:6c:37:01:
76:1e:ab:5d:3b:b4:98:23:e0:93:b8:91:01:ef:73:
4f:f0:5e:71:31:24:da:d9:9a:9c:cd:02:7f:b2:f8:
72:e4:ac:d6:61:fe:e4:42:60:a7:5d:cf:e3:82:cf:
a5:e5:7a:16:e0:83:c1:1d:f0:0b:c7:f1:76:49:04:
16:20:4a:ac:33:66:59:7d:aa:bd:13:d4:3d:ef:1e:
77:46:93:dc:db:eb:14:34:d5:18:ee:f9:00:c8:d8:
52:52:6b:91:1e:cb:de:23:60:ed:22:4a:de:34:f8:
89:a2:cc:38:b1:46:aa:b3:d9:ae:87:ab:c9:98:0d:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:69:77:A3:50:BF:0C:E1:B4:CB:3A:1E:8D:55:71:0D:D1:69:42
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ce:e9:ef:78:38:d0:1d:d3:90:1f:47:29:09:83:99:15:bb:
9b:7d:c9:c1:21:ac:95:73:84:2f:1b:82:c6:ab:b8:0e:4c:c4:
15:f2:1b:19:d6:6d:a5:ca:d1:59:91:71:bc:0f:71:14:e0:87:
b2:e1:f9:49:72:40:e6:aa:55:b7:13:7e:80:0e:7b:de:2c:10:
aa:72:5b:c0:27:07:ea:71:6b:b6:7f:b3:88:7f:d7:f9:f7:1a:
95:e9:be:1c:10:6b:48:2d:4c:98:6a:2c:5d:81:b3:53:3c:12:
d2:6c:77:d5:fe:9b:33:7b:9a:b3:75:77:ce:c3:58:0b:5b:6f:
c1:94:c0:93:e1:f0:87:54:cd:30:ed:64:90:35:73:27:26:b8:
cb:a0:38:e7:5d:82:e8:5b:80:17:06:0b:19:59:79:53:41:32:
7f:fb:a7:74:74:87:a0:ae:53:12:91:81:49:06:c9:d9:cc:cc:
f7:c2:cc:9f:84:d7:86:69:cf:50:c9:89:b0:e8:d3:11:f8:22:
16:5d:36:fd:31:62:3c:f4:b0:f2:bf:ea:84:ee:b7:e0:35:34:
ad:92:67:f6:f5:18:fc:f6:48:0e:69:eb:a3:6e:d9:81:15:90:
41:c9:01:c1:e9:36:ef:d3:d3:f3:72:6b:72:e1:5f:fb:bd:ee:
62:ae:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:23 2026 by rpki-client